Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.724exploits catalogados

35.724CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.492GitHub PoC 14.286VulnCheck XDB 8.703Nuclei 4.314Metasploit 3.474✓ só verificadosrecentes populares risco

22.492 exploits

Referência★ 62

A PoC exploit for CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution (RCE)

CVE-2024-25600CRITICAL

WordPress Bricks Theme <= 1.9.6 - Unauthenticated Remote Code Execution (RCE) vulnerability

85RISCO

abrir ↗

Referência

CVE-2017-8046

CVE-2017-8046—

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions pri

60RISCO

abrir ↗

Referência

CVE-2017-6326

CVE-2017-6326—

The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an i

60RISCO

abrir ↗

Referência✓ VexDay Proof

isiAJAX 1 - 'praises.php?id' SQL Injection

CVE-2009-0881—webappsphp

SQL injection vulnerability in ejemplo/paises.php in isiAJAX 1 allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Mozilla Firefox 3.0.x - XML Parser Memory Corruption / Denial of Service (PoC)

CVE-2009-1232—doswindows

Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruption

23RISCO

abrir ↗

Referência✓ VexDay Proof

Opera 9.64 - 7400 nested elements XML Parsing Remote Crash

CVE-2009-1234—dosmultiple

Opera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML document containing a lon

23RISCO

abrir ↗

Referência

CVE-2012-5333

CVE-2012-5333—

SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.x - 'hfs-fcntl' Kernel Privilege Escalation

CVE-2009-1235—localosx

XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.3.13 - 'zip-notify' Remote Kernel Overflow (PoC)

CVE-2009-1236—dososx

Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and e

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.3.13 - 'macfsstat' Local Kernel Memory Leak/Denial of Service

CVE-2009-1237—dososx

Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a den

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.3.13 - 'Profil' Kernel Memory Leak/Denial of Service (PoC)

CVE-2009-1237—dososx

Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a den

23RISCO

abrir ↗

Referência✓ VexDay Proof

Apple Mac OSX xnu 1228.x - 'vfssysctl' Local Kernel Denial of Service (PoC)

CVE-2009-1238—dososx

Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

FlexCMS Calendar - 'itemID' Blind SQL Injection

CVE-2009-1256—webappsphp

SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId para

23RISCO

abrir ↗

Referência✓ VexDay Proof

UltraISO 9.3.3.2685 - CCD/IMG Universal Buffer Overflow

CVE-2009-1257—localwindows

Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash

28RISCO

abrir ↗

Referência✓ VexDay Proof

AdaptBB 1.0 - 'topic_id' SQL Injection / Credentials Disclosure

CVE-2009-1259—webappsphp

SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magic_quotes_gpc is disabled, allows

23RISCO

abrir ↗

Referência✓ VexDay Proof

UltraISO 9.3.3.2685 - CCD/IMG Universal Buffer Overflow

CVE-2009-1260—localwindows

Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of ser

50RISCO

abrir ↗

Referência

CVE-2017-6334

CVE-2017-6334HIGHsob ataque

dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute ar

100RISCO

abrir ↗

Referência

CVE-2017-6334

CVE-2017-6334HIGHsob ataque

dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute ar

100RISCO

abrir ↗

Referência

CVE-2017-6334

CVE-2017-6334HIGHsob ataque

dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute ar

100RISCO

abrir ↗

Referência✓ VexDay Proof

EternalMart Guestbook 1.10 - '/admin/auth.php' Remote File Inclusion

CVE-2003-1314—webappsphp

PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook (EMGB) 1.1 allows remote attackers to

23RISCO

abrir ↗

Referência

CVE-2017-8729

CVE-2017-8729—

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current u

45RISCO

abrir ↗

Referência✓ VexDay Proof

Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution

CVE-2009-1277—webappsphp

SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2019-16724

CVE-2019-16724—

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Excepti

60RISCO

abrir ↗

Referência

CVE-2019-16724

CVE-2019-16724—

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Excepti

60RISCO

abrir ↗

Referência

CVE-2016-10009

CVE-2016-10009HIGH

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute

53RISCO

abrir ↗

Referência

CVE-2016-10009

CVE-2016-10009HIGH

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute

53RISCO

abrir ↗

Referência

CVE-2015-2455

CVE-2015-2455—

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2

35RISCO

abrir ↗

Referência

CVE-2018-6008

CVE-2018-6008—

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the download_file parameter

50RISCO

abrir ↗

Referência

CVE-2018-6008

CVE-2018-6008—

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the download_file parameter

50RISCO

abrir ↗

Referência

CVE-2017-11741

CVE-2017-11741—

HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo help

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.